Snort mailing list archives

[Fwd: Error: unable to open local.rules]


From: Colin Wu <wucolin () mcmaster ca>
Date: Fri, 08 Jun 2001 13:54:02 -0400



Colin Wu wrote:

It's running on an Ultra 10, Solaris 2.7 (or maybe 8, I'm not sure at the
moment).  The entire message was (after the usual time-stamp, host id, process
id stuff) "ERROR: Unable to open rules file: local.rules"

In answer to Aaron M: It doesn't seem to complain about any of the other rules
and it doesn't crash everytime.

Fyodor wrote:

On Fri, Jun 08, 2001 at 12:32:26PM -0400, Colin Wu wrote:
I periodically HUP my snort (v1.7) to checkpoint the binary dump log,
but occasionally snort will die with the message: " ERROR: Unable to
open rules file: local.rules" in syslog.  At this point I have to rename
the local.rules file and make a new copy (mv local.rules local; cp local
local.rules).

Any ideas?


Hmm.. sounds strange. Which platform is that?  Could you quote the whole
error message too (so we could see what errno's been set).

thanks
-F

--

   __     _             _            Network Analyst
  /  )   //            ' )   /       Computing & Information Services
 /    __|/  o ____      / / / . .    McMaster University
(__/ (_) \_<_/ / <_    (_(_/ (_/_    (905)525-9140 ext 24050
                                     http://netman.McMaster.CA

--

   __     _             _            Network Analyst
  /  )   //            ' )   /       Computing & Information Services
 /    __|/  o ____      / / / . .    McMaster University
(__/ (_) \_<_/ / <_    (_(_/ (_/_    (905)525-9140 ext 24050
                                     http://netman.McMaster.CA



_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: